Chapter 4 Using the Configuration Manager
Configuring Certificate Groups
4-20
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-06
7.
Save the configuration to flash memory. If it is not saved, the configuration is
lost during a power cycle or when the reload command is used.
SCA# write flash
SCA#
Example: Importing Certificate Groups
PKCS#7 certificate groups can be imported directly into the device. This example
demonstrates how to import a PEM-encoded PKCS#7 file into the Cisco Secure
Content Accelerator.
1.
Initiate a management session as described previously.
2.
Enter Privileged and Configuration modes.
3.
Enter SSL Configuration mode.
(config[myDevice])# ssl
(config-ssl[myDevice])#
4.
Specify the PKCS#7 file to import, indicating the appropriate encoding (in
this example, PEM). In this example, the name of the certificate group to
create is myCertGroup. The certificate prefix is impt. (The certificate prefix is
optional. This command must be entered on one line.)
(config-ssl[myDevice])# import pkcs7 myCertGroup pem impt
https://www.mycertgroups.com/certgroups/mygroup.pem
5.
The file is imported, and certificates and a certificate group are generated. The
certificates are named incrementally from impt_1 to impt_N, where N is the
number of certificates in the PKCS#7 file. The certificate with the highest
incremented number is the server certificate.
Note
See the entry in Appendix C for additional command options.
